CVE-2026-766699.9Critical
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Hewlett Packard Enterprise (HPE) · EdgeConnect SD-WAN Gateways
Not in CISA KEV
0.5%probability of exploitation in the next 30 days
42nd percentile
050100
Higher than 42% of scored CVEs
9.9CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- HPE Fixes Critical SD-WAN Flaws Enabling Remote Admin AccessSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.